LDAP with unconventional group

Vault
1

Hi, I’m (still) very new to Vault and am struggling with groups.

I’m using OpenLDAP with inetOrgPerson. I’m not using groups and would like to assign all LDAP users to the same Vault group. Is this possible? If not, can I use “businessCategory” in inetOrgPerson as the group?

2

Apparently, setting “token_policies” in vault write auth/ldap/config does it.